Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/CWY65mt7kqM9sZsF5F0nodAh6gQ.roa
File: CWY65mt7kqM9sZsF5F0nodAh6gQ.roa (raw, json)
Hash identifier: DHOwQv6vYIUqQnQH+vd+3JkZ53M082g8iPjUWMz7PKI=
Subject key identifier: 09:66:3A:E6:6B:7B:92:A3:3D:B1:9B:05:E4:5D:27:A1:D0:21:EA:04
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 018570F08CB5EE8CC96083C0994B69A2C3C1
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/CWY65mt7kqM9sZsF5F0nodAh6gQ.roa
Signing time: Mon 02 Jan 2023 05:24:50 +0000
ROA not before: Mon 02 Jan 2023 05:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51219
IP address blocks: 2a0a:2b00::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:8c:b5:ee:8c:c9:60:83:c0:99:4b:69:a2:c3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 2 05:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09663ae66b7b92a33db19b05e45d27a1d021ea04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:ab:e7:f0:4d:80:f5:45:8c:0c:26:8a:fc:
34:31:9e:b9:9e:81:17:8b:40:cb:46:25:9b:13:48:
c4:4d:2d:d0:80:15:7d:8f:61:ab:d3:04:c8:61:81:
a3:2e:b5:f6:83:30:e7:71:29:f1:d3:97:dc:b2:8e:
06:a9:04:03:28:4c:68:ba:b6:95:0f:84:5e:fc:96:
65:e8:43:a9:9e:81:0c:a1:d2:a5:49:4c:ce:d4:2c:
4f:24:e6:a9:b3:01:2b:2d:eb:ac:4a:47:71:a6:e8:
74:a1:9a:8d:d1:f3:9b:d0:56:ca:49:77:27:64:1b:
42:8e:1a:dc:d6:a5:08:21:1c:45:23:8f:5e:4b:c4:
0c:2c:e4:3a:d5:1a:fb:94:0c:61:b7:54:99:84:14:
96:8c:ef:16:5d:77:37:41:5e:db:b9:ea:28:2a:d1:
6e:0b:df:c9:9a:4f:48:18:a6:51:98:c1:73:12:0d:
e4:45:18:ed:ea:31:66:d2:b9:77:c8:fb:b6:84:11:
55:35:a5:67:c1:8e:5e:0c:fa:be:2d:02:be:78:f2:
85:95:82:ad:bd:63:52:1d:7e:dc:7c:81:a5:3d:a4:
fc:44:56:11:6d:12:1d:32:ed:6f:fe:dd:57:89:c5:
5d:41:41:30:74:7d:79:29:1e:54:b1:1f:bf:bb:be:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:3A:E6:6B:7B:92:A3:3D:B1:9B:05:E4:5D:27:A1:D0:21:EA:04
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/CWY65mt7kqM9sZsF5F0nodAh6gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2b00::/32
Signature Algorithm: sha256WithRSAEncryption
58:04:3c:04:59:59:e8:7d:dc:1e:e3:9b:7e:23:4d:2b:ee:69:
5e:3e:d6:26:eb:de:5c:9a:51:04:97:ac:cd:91:0f:12:7b:06:
be:87:61:34:8e:76:f6:10:df:dd:97:e9:b9:2d:f5:d3:41:fe:
69:12:8b:26:28:16:84:d2:95:1e:fd:a0:5a:fd:31:be:16:1d:
d9:73:38:a6:74:cd:9b:15:da:2a:6d:25:3b:47:09:ae:84:cf:
60:18:44:ec:1e:64:1f:4a:4a:a6:2f:66:72:de:4c:e3:d6:2d:
6a:0d:07:03:3a:86:5f:45:2b:31:07:dd:53:a9:9b:99:a8:b4:
40:e2:42:39:3c:9e:68:7e:ca:ff:c8:47:40:e6:06:86:60:d1:
18:c5:79:12:3c:89:a2:5b:f4:7d:d0:52:f1:34:49:69:cb:fc:
b0:e6:71:1c:7d:93:e3:39:62:99:ca:b7:3d:24:2c:7c:59:7b:
42:93:1e:b0:6f:dd:45:bd:84:4c:3f:a0:b0:4f:b0:07:68:32:
c8:3b:97:a8:de:a2:91:47:83:4f:27:3d:d7:b6:6c:60:33:2b:
e9:b3:f5:e3:09:4d:d9:42:9e:1f:c0:da:ff:5a:49:1b:ab:8c:
69:90:51:8d:57:8b:c5:04:25:a0:f0:bd:be:e5:97:24:37:a8:
67:a9:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:58 2024 by rpki-client on console-ams.rpki-client.org